Security feature bypass

2022-01-1014:10:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.9%

In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API.

CPENameOperatorVersion
beaver_builderlt2.5.1
beaver_builderlt2.5.1

CPE	Name	Operator	Version
	beaver_builder	lt	2.5.1
	beaver_builder	lt	2.5.1

References

docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-content/

tekfused.com/tek/vulnerability-research/beaver-builder-vulnerabilities-visibility-conditional-logic-cve/